Is there any documentation I can go through that explains how to remove the Certificate Error I am getting as shown in the attachment.  I have tried creating my own certificate and putting it in the elog ssl folder but that just prevented the elog service from starting.  Any help would be greatly appreciated.  Thanks.

How did you create the certificate?
Are you running eLog on a server with more than one host name (CNAME entries) and are you pointing to your eLog
via one of that aliases?

Certificates that work with an Apache 1 Web server do work with eLog, too.

GS

> 
> How did you create the certificate?
> Are you running eLog on a server with more than one host name (CNAME entries) and are you pointing to your eLog
> via one of that aliases?
> 
> Certificates that work with an Apache 1 Web server do work with eLog, too.
> 
> GS

The certificate that is on there right now is the one that gets created when you install elogs.  I have tried 
creating one with a windows server 2008 box with the CA role installed.  The certificate is created without issue 
and I can install it on the server but when I try to restart the elog service it wont start until I put the 
original server.crt and server.key file back into the ssl directory.  

I have DNS on the machine but only have one CNAME pointing to the elog server.

I don't know a lot about certificates so sorry if this doesn't help out much. 

> 
> The certificate that is on there right now is the one that gets created when you install elogs.  I have tried 
> creating one with a windows server 2008 box with the CA role installed.  The certificate is created without issue 
> and I can install it on the server but when I try to restart the elog service it wont start until I put the 
> original server.crt and server.key file back into the ssl directory.  
> 

I don't know anything about Windows server CA, but eLog is very strict in the syntax of the CERTs.
I had to learn it the hard way when installing a chain CERT.

For server.crt and server.key it MUST NOT be a chain cert. Therefor you have to use chain.crt

Are the generated CERTs ASCII (with only one -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- in
server.crt 
and -----BEGIN RSA PRIVATE KEY----- and -----END RSA PRIVATE KEY----- in server.key)?

So the eLog generated keys should look like..

GS

> > 
> > The certificate that is on there right now is the one that gets created when you install elogs.  I have tried 
> > creating one with a windows server 2008 box with the CA role installed.  The certificate is created without issue 
> > and I can install it on the server but when I try to restart the elog service it wont start until I put the 
> > original server.crt and server.key file back into the ssl directory.  
> > 
> 
> I don't know anything about Windows server CA, but eLog is very strict in the syntax of the CERTs.
> I had to learn it the hard way when installing a chain CERT.
> 
> For server.crt and server.key it MUST NOT be a chain cert. Therefor you have to use chain.crt
> 
> Are the generated CERTs ASCII (with only one -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- in
> server.crt 
> and -----BEGIN RSA PRIVATE KEY----- and -----END RSA PRIVATE KEY----- in server.key)?
> 
> So the eLog generated keys should look like..
> 
> GS

Thanks for your reply.  I appreciate it alot.

When I created my certificate it came out as a .cer [there was no .key file] and looking at the code that was posted 
below it looks like unless there is a server.crt and server.key file in the ssl folder the program will exit:  So I 
guess I need to figure out how to generate a certificate that elog will understand using a .key file and a .crt file.  
So I might have to research certificates more.

To be honest I'm not an expert on SSL. I just use following code inside ELOG to initialize the SSL connection:

SSL_CTX *init_ssl(void)
{
   char str[256];
   SSL_METHOD *meth;
   SSL_CTX *ctx;

   SSL_library_init();
   SSL_load_error_strings();

   meth = SSLv23_method();
   ctx = SSL_CTX_new(meth);

   strlcpy(str, resource_dir, sizeof(str));
   strlcat(str, "ssl/server.crt", sizeof(str));
   if (!file_exist(str)) {
      eprintf("Cerificate file \"%s\" not found, aborting\n", str);
      return NULL;
   }
   if (SSL_CTX_use_certificate_file(ctx, str, SSL_FILETYPE_PEM) < 0)
      return NULL;

   strlcpy(str, resource_dir, sizeof(str));
   strlcat(str, "ssl/server.key", sizeof(str));
   if (!file_exist(str)) {
      eprintf("Key file \"%s\" not found, aborting\n", str);
      return NULL;
   }
   if (SSL_CTX_use_PrivateKey_file(ctx, str, SSL_FILETYPE_PEM) < 0)
      return NULL;
   if (SSL_CTX_check_private_key(ctx) < 0)
      return NULL;

   strlcpy(str, resource_dir, sizeof(str));
   strlcat(str, "ssl/chain.crt", sizeof(str));
   if (file_exist(str))
      SSL_CTX_use_certificate_chain_file(ctx, str);

   return ctx;
}

> The certificate that is on there right now is the one that gets created when you install elogs.  I have tried 
> creating one with a windows server 2008 box with the CA role installed.  The certificate is created without issue 
> and I can install it on the server but when I try to restart the elog service it wont start until I put the 
> original server.crt and server.key file back into the ssl directory.  

How did you install the certificate? Maybe it ended up in the IIS directory and not in the elog directory?

> > The certificate that is on there right now is the one that gets created when you install elogs.  I have tried 
> > creating one with a windows server 2008 box with the CA role installed.  The certificate is created without issue 
> > and I can install it on the server but when I try to restart the elog service it wont start until I put the 
> > original server.crt and server.key file back into the ssl directory.  
> 
> How did you install the certificate? Maybe it ended up in the IIS directory and not in the elog directory?

That is a good point.  I just installed the cert by double clicking on it.  Then selecting either trusted root CA or 
personal to install the certificate.  Is there a different way to install the certificate for elog?

Thanks alot for your help.

We are trying to track down an issue where elogd just stops, and I cannot seem to find a cause.

In the logs, I see:
Dec  3 14:01:23 nissrv18a kernel: [419738.139675] elogd[32003]: segfault at 4 ip 00007f183b19b560 sp 00007fff79f5e278 error 4
in libc-2.10.1.so[7f183b119000+166000]
 

Any thoughts?

 I need more information about that. Please have a look at Faq #19.

Is there a way to configure ELOG to default to the Status column in descending order rather than the Date in descending order?

Thanks

Sort attributes = Status

... as written in the manual. 

Thanks for the quick response. This works. I noticed that the Dates aren't descending, is there a way to have the dates descending while sorting Status?

Thanks again!

For this you need

Sort attributes = Status, Date

which however only works from version 2.7.8 on. 

Hi Stefan,

This has happened twice on this forum now, starting from Mon 23rd November.

Someone submits an entry (Me, 66625, Bertram Metz 66628)
I assume you post a reply (66626, 66629), but it shows up as if I or Bertram are the author of the reply, not
yourself.  My reply to you (66627) was really authored by me, and I expressed puzzlement then at this point.

Is this a bug, or some wierd affect of us forgetting to log out?

Regards,

David.

> Hi Stefan,
> 
> This has happened twice on this forum now, starting from Mon 23rd November.
> 
> Someone submits an entry (Me, 66625, Bertram Metz 66628)
> I assume you post a reply (66626, 66629), but it shows up as if I or Bertram are the author of the reply, not
> yourself.  My reply to you (66627) was really authored by me, and I expressed puzzlement then at this point.
> 
> Is this a bug, or some wierd affect of us forgetting to log out?
> 
> Regards,
> 
> David.

Thanks for pointing out this issue. This bug was introduced recently, when I tried to avoid the

Re: Re: Re: ...

in the subject line. I changed this now completely so that we can have

Preset on reply Author = $full_name
Preset on first reply Subject = Re: $Subject

which fixes both things. The modification is in revision 2271.

> > Hi Stefan,
> > 
> > This has happened twice on this forum now, starting from Mon 23rd November.
> > 
> > Someone submits an entry (Me, 66625, Bertram Metz 66628)
> > I assume you post a reply (66626, 66629), but it shows up as if I or Bertram are the author of the reply, not
> > yourself.  My reply to you (66627) was really authored by me, and I expressed puzzlement then at this point.
> > 
> > Is this a bug, or some wierd affect of us forgetting to log out?
> > 
> > Regards,
> > 
> > David.
> 
> Thanks for pointing out this issue. This bug was introduced recently, when I tried to avoid the
> 
> Re: Re: Re: ...
> 
> in the subject line. I changed this now completely so that we can have
> 
> Preset on reply Author = $full_name
> Preset on first reply Subject = Re: $Subject
> 
> which fixes both things. The modification is in revision 2271.

Thanks Stefan!

Hi Stefan,

I'm interested in the current configuration file for this discussion forum. Could you please post it to the
'config examples' logbook?

Thanks,
Bertram

> Hi Stefan,
> 
> I'm interested in the current configuration file for this discussion forum. Could you please post it to the
> 'config examples' logbook?
> 
> Thanks,
> Bertram

Sure, here it is!

Hi Stefan,

I attached a 12 page (22kB) pdf file - no images - to an entry, but elog only converted the first 8 pages to
images (.png).  This is reproducable, i.e. a different small multipage pdf file produced the same number of images.

The size of the pdf file does not seem to be a problem, a single page pdf file with a lot of images in it
attached as expected.

Is this correct, or a defined limitation?

> Hi Stefan,
> 
> I attached a 12 page (22kB) pdf file - no images - to an entry, but elog only converted the first 8 pages to
> images (.png).  This is reproducable, i.e. a different small multipage pdf file produced the same number of images.
> 
> The size of the pdf file does not seem to be a problem, a single page pdf file with a lot of images in it
> attached as expected.
> 
> Is this correct, or a defined limitation?

This is a defined limitation. Sometimes people attach whole books in PDF form to an entry, and you don't want to end up 
with hundreds of images cluttering your browser. If you want to see the full document, just load it into your PDF viewer.

> > Hi Stefan,
> > 
> > I attached a 12 page (22kB) pdf file - no images - to an entry, but elog only converted the first 8 pages to
> > images (.png).  This is reproducable, i.e. a different small multipage pdf file produced the same number of images.
> > 
> > The size of the pdf file does not seem to be a problem, a single page pdf file with a lot of images in it
> > attached as expected.
> > 
> > Is this correct, or a defined limitation?
> 
> This is a defined limitation. Sometimes people attach whole books in PDF form to an entry, and you don't want to end up 
> with hundreds of images cluttering your browser. If you want to see the full document, just load it into your PDF viewer.

Thanks, Stefan (why is this answer down under my name!?)

I couldn't find reference to this in the documentation.  In the case I referred to, I'll have to play with the pdf so that
the six pages I actually want displayed are.

Hi

Would it be possible to use the "Export to:" function with IE7 on the Forum logbook, and save the logbook.

I can do the export but saving the file with IE7 does not work. Saving the file with Firefox, Chrome, Safari works.

This makes me think that E-log is good and IE7 is bad ?

Soren

Right   

It seems to be a well known probmel with IE: http://classicasp.aspfaq.com/files/directories-fso/how-do-i-send-the-correct-filename-with-binarywrite.html 

So I tried all variations there, but none of them worked. The interesting thing is that it works if you use it locally, but not with the forum (which has an additional "/elogs" in the URL).

 Problem resolved.

We use eLOG with IE. Once we turned on SSL, it is no longer possible to "Export to CSV" and save the output.

The error that we get is:

Internet Explorer was not able to open this Internet site. The requested site is either unavailable or cannot be found. Please try again later.

This is documented on Microsoft's site: http://support.microsoft.com/kb/316431

It is considered a feature with no fix. Basically the browser is honoring a request from the server which is "Pragma: no-cache". Problem can be reproduced in IE versions 6 through 8.
 

I see the same problem with IE. The knowledge base says that one should remove the "no-cache" statement from the header, but that has strange side effects: Assume you export a logbook to a CSV file, and a few days later you export it again, since many things changed. But you browser will in that case not retrieve the new logbook, but read the old CSV file from the cache. But the browser does not tell you this, so you see an old version of the logbok without knowing this, which can be dangerous. So I better leave the "no-cache" in the header. The workaroung is not to click on "Save" on the file download dialog, but on "Open". You see then the CSV data inside the browser and can copy/paste it into a notepad document, then save it. 

 Ah, now this is humorous, when the client first came to me, that was almost exactly the work around I gave him, open it, CTRL-A to highlight it all, CTRL-C to copy it, Move to the excel spreadsheet, CTRL-V to paste it into Excel. Select Data, Text to Columns, and you have an Excel Spreadsheet.   They wanted me to post the change in function anyway, though I told Vamsi, "just watch, someone will post the same workaround that I already gave to the clients".  So you see why I find it amusing.  I would say Great Minds Think Alike, but that would be giving myself a bit too much credit (grin).  First, thank you for proving me right on my prediction and if you should happen to make a change that would get around this SSL change in behavior, it would make a group of manufacturing types that are not quite as comfortable with computers as we are, very happy.   Please let us know.

I can easily remove the "no-cache" from the header, but as I wrote you, people can then shoot themselves into the foot by getting an old document, and I guess they become even less happy then. So you tell me which way you prefer. 

 Trust me, I don't want them getting old data either.. that would be a nightmare..

of course, the little voice at the back of my head (note, not IN the back of my head) has offered up this tidbit for you to consider.

Stefan, would it be possible to make the following change so that the document is not cached and at the same time it is possible to save it.

The change would entail replacing the "Pragma: no-cache" directive with an "Expires: " <HTTP-date> where <HTTP-date> is the same as Date header value. Please see section 14.21 of http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html

Hopefully there are no other side effects to this change.

 You can also try to use a different browser.

Soren

ok, so I removed the "Pragma: no-cache". With IE it looks fine now, and if I repeat it two times it always gets is from elog and not from the cache due to the "Expires:" statement. The "no-cache" came from old days when some browsers did not yet support the "Expires" tag. I hope that this is better now, so let's see when we get the first complaints. The modification is in SVN revision 2265.

 This seems to work fine.